$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PQ9sk3l58r-hX9SCYIZkmt3PSAQ.roa File: PQ9sk3l58r-hX9SCYIZkmt3PSAQ.roa (raw, json) Hash identifier: AgXZqsLMe7HytY86vDRn6wg2oA3KDXWcsrgSX6M1CEY= Subject key identifier: 3D:0F:6C:93:79:79:F2:BF:A1:5F:D4:82:60:86:64:9A:DD:CF:48:04 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 113D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PQ9sk3l58r-hX9SCYIZkmt3PSAQ.roa Signing time: Sun 01 Mar 2026 02:12:47 +0000 ROA not before: Sun 01 Mar 2026 02:12:47 +0000 ROA not after: Mon 15 Feb 2027 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4413 (0x113d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 1 02:12:47 2026 GMT Not After : Feb 15 01:30:02 2027 GMT Subject: CN=3D0F6C937979F2BFA15FD4826086649ADDCF4804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ac:57:3d:5b:a1:6a:b1:15:bc:7f:d0:9a:ad: da:76:2b:a0:ef:1b:a1:d4:c8:d6:ee:ac:59:e9:b9: 73:1e:2b:ec:89:90:d6:d3:59:83:f4:3c:9f:bd:ab: 6b:dd:14:d9:c2:4c:6b:56:19:ee:8c:ae:92:f2:20: af:dc:a3:df:6d:50:93:26:e3:85:38:c5:a5:f1:d6: 4f:68:da:87:d8:75:ba:25:14:df:86:6d:00:64:0e: f5:7d:94:3a:4e:16:2b:f3:68:02:73:4e:a7:4b:11: 45:1b:aa:05:7b:c4:57:47:55:aa:b0:f5:f4:4d:3c: 3d:7a:c9:31:b0:19:ad:79:f8:62:8b:f5:a9:e8:38: df:ca:7e:9b:ec:61:7d:05:b1:86:ef:b3:14:03:65: 7f:37:f2:74:db:07:64:8c:2a:33:03:63:a2:8f:43: 54:5e:41:a0:66:7a:be:90:aa:23:3e:50:a0:8c:7f: ad:9d:ac:d9:d9:43:91:65:76:89:71:5b:ea:70:ae: 68:8f:f1:32:1f:8a:68:a2:94:63:dd:a9:06:ee:5c: 23:4f:61:3b:16:fe:ef:2f:4d:ba:e9:af:97:33:28: bb:23:c1:af:5c:40:0d:d8:2b:11:aa:e4:60:99:e9: b3:7a:a6:79:da:11:03:b0:28:ff:e5:25:cd:a8:7f: f2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0F:6C:93:79:79:F2:BF:A1:5F:D4:82:60:86:64:9A:DD:CF:48:04 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PQ9sk3l58r-hX9SCYIZkmt3PSAQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.88.0/22 Signature Algorithm: sha256WithRSAEncryption ae:46:b7:18:86:67:c9:13:95:46:49:ba:d4:a9:d9:08:41:a9: ff:4d:5d:ec:86:e8:1f:7e:55:e5:82:de:a1:a4:3e:8e:84:93: 45:79:06:11:d4:2b:a2:1f:71:0b:92:05:a8:50:32:ca:bd:62: 71:0d:d6:07:6b:c7:bb:ed:9b:54:e6:45:1b:19:82:47:6c:bf: 13:a2:de:86:a8:b9:a5:08:43:a5:23:34:d4:a4:40:f9:c4:75: 38:69:e4:92:73:1f:07:10:29:67:1f:bc:76:92:ae:40:93:c3: e7:9a:0f:a6:a5:88:df:16:b6:5e:b9:da:73:72:c7:fe:20:5d: cd:4d:15:ac:e8:bf:18:cf:35:56:cf:53:c5:45:37:f4:0b:e4: 10:f9:7d:75:fb:f4:e3:06:8d:73:40:69:c2:64:18:e9:19:02: 2a:f6:f0:65:53:46:88:f4:93:8c:78:e2:7e:17:a6:fe:b9:fc: 87:66:cf:99:aa:ab:77:7a:e2:ce:1d:e3:d4:6d:6b:09:76:76: b7:b0:2f:d3:a3:c5:43:5a:a3:18:b7:f0:ce:dc:4f:9f:0f:fa: be:4d:ad:ce:df:f3:8c:ce:60:3c:80:77:c7:36:18:3e:25:3e: 56:47:d5:15:a0:15:33:3f:68:0a:3f:6a:0d:11:c3:d4:b8:b9: 4e:e1:2d:89 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICET0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMDEw MjEyNDdaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNEMEY2QzkzNzk3OUYy QkZBMTVGRDQ4MjYwODY2NDlBRERDRjQ4MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBrFc9W6FqsRW8f9Cardp2K6DvG6HUyNburFnpuXMeK+yJkNbT WYP0PJ+9q2vdFNnCTGtWGe6MrpLyIK/co99tUJMm44U4xaXx1k9o2ofYdbolFN+G bQBkDvV9lDpOFivzaAJzTqdLEUUbqgV7xFdHVaqw9fRNPD16yTGwGa15+GKL9ano ON/KfpvsYX0FsYbvsxQDZX838nTbB2SMKjMDY6KPQ1ReQaBmer6QqiM+UKCMf62d rNnZQ5FldolxW+pwrmiP8TIfimiilGPdqQbuXCNPYTsW/u8vTbrpr5czKLsjwa9c QA3YKxGq5GCZ6bN6pnnaEQOwKP/lJc2of/I9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUPQ9sk3l58r+hX9SCYIZkmt3PSAQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1BROXNrM2w1OHItaFg5U0NZSVprbXQzUFNBUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYlgwDQYJKoZIhvcNAQELBQADggEBAK5GtxiGZ8kTlUZJutSp2QhBqf9N XeyG6B9+VeWC3qGkPo6Ek0V5BhHUK6IfcQuSBahQMsq9YnEN1gdrx7vtm1TmRRsZ gkdsvxOi3oaouaUIQ6UjNNSkQPnEdThp5JJzHwcQKWcfvHaSrkCTw+eaD6aliN8W tl652nNyx/4gXc1NFazovxjPNVbPU8VFN/QL5BD5fXX79OMGjXNAacJkGOkZAir2 8GVTRoj0k4x44n4Xpv65/Idmz5mqq3d64s4d49Rtawl2drewL9OjxUNaoxi38M7c T58P+r5Nrc7f84zOYDyAd8c2GD4lPlZH1RWgFTM/aAo/ag0Rw9S4uU7hLYk= -----END CERTIFICATE-----Generated at Mon Mar 2 05:18:28 2026 by rpki-client